This is a proof of concept to show how the Kubernetes agent could be
restricted to run on protected branches only.

https://gitlab.com/gitlab-org/gitlab/-/issues/467936

Changelog: added